Tripleplay vulnerabilities

5 known vulnerabilities in Tripleplay from Uniguest. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Tripleplay: Improper Control of Generation of Code

  CVE-2024-50707Mar 4, 2025Uniguest

  Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.

• 10.0 Critical severity

  Tripleplay: Improper Control of Generation of Code

  CVE-2024-50704Mar 4, 2025Uniguest

  Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request.

• 9.8 Critical severity

  Tripleplay: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-50706Mar 4, 2025Uniguest

  Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.

• 7.1 High severity

  Tripleplay: Cross-Site Request Forgery

  CVE-2024-50705Mar 4, 2025Uniguest

  Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.

• 8.8 High severity

  Tripleplay: Insufficiently Protected Credentials

  CVE-2023-25760Apr 19, 2023Uniguest

  Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload